JP6981497B2 - Information processing system, information processing device, and information processing method - Google Patents

Description

The present invention relates to an information processing system, an information processing apparatus, and an information processing method.

In recent years, services that provide functions that combine multiple functions (for example, scanning, printing, mail delivery, etc.) have become known. For example, a service for delivering electronic data generated by scanning by e-mail is known. Such a service is realized by executing one or more processes for realizing each function as a series of processes.

Further, there is known an image forming apparatus that executes a series of processes based on an instruction sheet including processing information or the like representing one or more processes as a series of processes (see, for example, Patent Document 1).

The above-mentioned service can be used, for example, by executing a series of processes by using an application installed in the device. Here, when an application mounted on a device executes a series of processes, it is preferable to authenticate the application from the viewpoint of preventing unauthorized use.

The embodiment of the present invention has been made in view of the above points, and an object thereof is to authenticate the device before executing a series of processes.

In order to achieve the above object, an embodiment of the present invention is an information processing system including one or more information processing devices and having a plurality of programs for executing predetermined processing, respectively, and is a series of information processing systems using electronic data. For each process, the flow information is identified by the program identification information that identifies one or more programs that execute each process of the series of processes and the flow information that defines the execution order of one or more programs. Information about electronic data, the flow identification information, and the one device from one of the storage means connected to the information processing system and one or more devices connected to the information processing system. The said, based on the first receiving means of receiving the first request including the authentication information for performing authentication, and the authentication information included in the first request received by the first receiving means. The first request received by the first receiving means among the flow information stored in the storage means and the authentication means for authenticating one device and when the authentication by the authentication means is successful. It is identified by the acquisition means for acquiring the flow information stored in the storage means in association with the flow identification information included in the acquisition means and the program identification information defined in the flow information acquired by the acquisition means. By executing each of the programs according to the execution order defined in the flow information, electronic data based on the information related to the electronic data included in the first request received by the first receiving means can be obtained. It has an execution means for executing the series of processes used.

According to an embodiment of the present invention, the device can be authenticated before performing a series of processes.

It is a figure which shows the system configuration of an example of the information processing system which concerns on this embodiment. It is a figure which shows the hardware configuration of an example of the service provision system which concerns on this embodiment. It is a figure which shows the hardware configuration of an example of the apparatus which concerns on this embodiment. It is a figure which shows the functional structure of an example of the information processing system which concerns on this embodiment. It is a figure which shows the functional structure of an example of the logic processing part which concerns on this embodiment. It is a figure which shows an example of the type conversion information table. It is a figure which shows the functional structure of an example of the job management part which concerns on this embodiment. It is a figure which shows an example of the processing flow information. It is a sequence diagram which shows an example of the whole processing of a service use. It is a figure which shows an example of a service use screen. It is a sequence diagram which shows an example of execution process of a process flow. It is a figure which shows an example of a job information. It is a sequence diagram which shows an example of the registration process of a referenceable application. It is a figure which shows an example of the reference information. It is a sequence diagram which shows an example of the reference process of job information. It is a figure which shows an example of the reference screen of a job information. It is a sequence diagram which shows the other example (the 1) of the reference process of a job information. It is a figure which shows other example of job information. It is a sequence diagram which shows the other example (the 2) of the reference process of a job information.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

<System configuration>
First, the system configuration of the information processing system 1 according to the present embodiment will be described with reference to FIG. FIG. 1 is a diagram showing a system configuration of an example of the information processing system 1 according to the present embodiment.

The information processing system 1 shown in FIG. 1 includes a service providing system 10 and a device 20, and is communicably connected via a wide area network N1 such as the Internet.

The service providing system 10 is realized by one or more information processing devices, and is realized by a series of processes in which one or more of the plurality of processes that realize various functions are combined via the network N1. Provide various services.

Here, the function is a function related to an electronic file such as a document file or an image file. Functions include, for example, printing, scanning, facsimile transmission, data format conversion, mail delivery, OCR (Optical character recognition) processing, processing, compression / decompression, storage in a repository, and the like.

A specific example of the service provided by the service providing system 10 according to the present embodiment will be described later. In the following, a series of processes will also be referred to as a “process flow”.

The device 20 is various electronic devices used by the user. That is, the device 20 is, for example, an image forming device such as an MFP (Multifunction Peripheral), a PC (personal computer), a projector, an electronic blackboard, a digital camera, or the like. The user can use various services provided by the service providing system 10 by using the device 20.

In the following, a plurality of devices 20, when distinguishing the each "device 20 _1", describes using a subscript as "device 20 _2" and the like.

Further, the configuration of the information processing system 1 shown in FIG. 1 is an example, and may be another configuration. For example, the information processing system 1 according to the present embodiment includes various devices that input and output electronic data at least, and these devices may use the service provided by the service providing system 10. ..

<Hardware configuration>
Next, the hardware configuration of the service providing system 10 included in the information processing system 1 according to the present embodiment will be described with reference to FIG. FIG. 2 is a diagram showing a hardware configuration of an example of the service providing system 10 according to the present embodiment.

The service providing system 10 shown in FIG. 2 has an input device 11, a display device 12, an external I / F 13, and a RAM (Random Access Memory) 14. Further, the service providing system 10 includes a ROM (Read Only Memory) 15, a CPU (Central Processing Unit) 16, a communication I / F 17, and an HDD (Hard Disk Drive) 18. Each of these hardware is connected by a bus B.

The input device 11 includes a keyboard, a mouse, a touch panel, and the like, and is used for the user to input each operation signal. The display device 12 includes a display and the like, and displays the processing result by the service providing system 10. At least one of the input device 11 and the display device 12 may be connected to and used by the service providing system 10 when necessary.

The communication I / F 17 is an interface for connecting the service providing system 10 to the network N1. As a result, the service providing system 10 can perform communication via the communication I / F 17.

The HDD 18 is a non-volatile storage device that stores programs and data. The programs and data stored in the HDD 18 include an OS (Operating System) which is basic software for controlling the entire service providing system 10, application software which provides various functions on the OS, and the like.

The service providing system 10 may use a drive device (for example, a solid state drive: SSD) that uses a flash memory as a storage medium instead of the HDD 18. Further, the HDD 18 manages the stored programs and data by a predetermined file system and / or DB.

The external I / F 13 is an interface with an external device. The external device includes a recording medium 13a and the like. As a result, the service providing system 10 can read and write the recording medium 13a via the external I / F 13. The recording medium 13a includes a flexible disk, a CD, a DVD, an SD memory card, a USB memory, and the like.

The ROM 15 is a non-volatile semiconductor memory that can hold programs and data even when the power is turned off. The ROM 15 stores programs and data such as BIOS (Basic Input / Output System), OS settings, and network settings that are executed when the service providing system 10 is started. The RAM 14 is a volatile semiconductor memory that temporarily holds programs and data.

The CPU 16 is an arithmetic unit that realizes control and functions of the entire service providing system 10 by reading programs and data from a storage device such as the ROM 15 and the HDD 18 onto the RAM 14 and executing processing.

By having the hardware configuration shown in FIG. 2, the service providing system 10 according to the present embodiment can realize various processes as described later.

Next, a hardware configuration when the device 20 included in the information processing system 1 according to the present embodiment is an image forming apparatus will be described with reference to FIG. FIG. 3 is a diagram showing a hardware configuration of an example of the device 20 according to the present embodiment.

The device 20 shown in FIG. 3 has a controller 21, an operation panel 22, an external I / F 23, a communication I / F 24, a printer 25, and a scanner 26. Further, the controller 21 has a CPU 31, a RAM 32, a ROM 33, an NVRAM 34, and an HDD 35.

The ROM 33 is a non-volatile semiconductor memory that stores various programs and data. The RAM 32 is a volatile semiconductor memory that temporarily holds programs and data. The NVRAM 34 stores, for example, setting information and the like. Further, the HDD 35 is a non-volatile storage device that stores various programs and data.

The CPU 31 is an arithmetic unit that realizes control and functions of the entire device 20 by reading programs, data, setting information, etc. from the ROM 33, NVRAM 34, HDD 35, etc. onto the RAM 32 and executing processing.

The operation panel 22 includes an input unit for receiving input from the user and a display unit for displaying. The external I / F 23 is an interface with an external device. The external device includes a recording medium 23a and the like. As a result, the device 20 can read and / or write to the recording medium 23a via the external I / F 23. The recording medium 23a includes, for example, an IC card, a flexible disk, a CD, a DVD, an SD memory card, a USB memory, and the like.

The communication I / F 24 is an interface for connecting the device 20 to the network. As a result, the device 20 can communicate via the communication I / F 24. The printer 25 is a printing device that prints print data. The scanner 26 is a scanning device that reads a document and generates an electronic file (image file).

By having the hardware configuration shown in FIG. 3, the device 20 according to the present embodiment can realize various processes as described later.

<Services provided by the service provision system>
Here, the service provided by the service providing system 10 according to the present embodiment will be described. Hereinafter, the device 20 will be described as being an image forming apparatus.

The service providing system 10 according to the present embodiment provides a service of performing OCR processing on an electronic file (image file) generated by scanning a manuscript in the device 20 and delivering an e-mail to an e-mail address designated by a user. ..

Hereinafter, the service providing system 10 according to the present embodiment will be described as providing the above-mentioned service (“scan To mail delivery” service).

However, the service provided by the service providing system 10 is not limited to this. The service providing system 10 may provide, for example, a service in which an electronic file generated by scanning a document in the device 20 is compressed and stored in a repository. Further, the service providing system 10 may provide a service of processing an electronic file generated by scanning a document in the device 20 (for example, adding a predetermined wording to the electronic file) and transmitting the electronic file by facsimile. good.

Further, for example, when the device 20 is an electronic blackboard or the like, the service providing system 10 according to the present embodiment provides a service of processing an electronic file generated by the device 20 which is an electronic blackboard and delivering it by e-mail. May be provided.

<Functional configuration>
Next, the functional configuration of the information processing system 1 according to the present embodiment will be described with reference to FIG. FIG. 4 is a diagram showing a functional configuration of an example of the information processing system 1 according to the present embodiment.

The device 20 shown in FIG. 4 has a client application 210 executed by, for example, a CPU 31 or the like. The client application 210 is an application program for using the service provided by the service providing system 10. The user can use the "scan To mail delivery" service provided by the service providing system 10 by using the client application 210 installed in the device 20. The client application 210 is given an application ID that identifies the client application 210.

The service providing system 10 shown in FIG. 4 has an input / output service processing unit 110, an authentication service unit 120, and a document service unit 130. Each of these functional units is realized by a process of causing the CPU 16 to execute one or more programs installed in the service providing system 10.

Further, the service providing system 10 shown in FIG. 5 has an application information storage unit 140, a job information storage unit 150, and a reference information storage unit 160. Each of these storage units can be realized by using the HDD 18. It should be noted that at least one of these storage units may be realized by using a storage device or the like connected to the service providing system 10 via the network N1.

The input / output service processing unit 110 performs processing related to the service provided by the service providing system 10. Here, the input / output service processing unit 110 includes an application management unit 111, a logic processing unit 112, and a job management unit 113.

The application management unit 111 manages the application information 1000 stored in the application information storage unit 140 and the reference information stored in the reference information storage unit 160.

The application information 1000 is an application for providing a service realized by a series of processes. That is, various services provided by the service providing system 10 (for example, "scan To mail delivery" service) are provided by the application information 1000. Further, the reference information is for determining whether or not the client application 210, the application information 1000, etc. can refer to the information (job information) of the job executed by the other client application 210, the application information 1000, etc. Information.

Further, the application management unit 111 returns the processing flow information 1100 included in the application information 1000 in response to the request from the logic processing unit 112. The processing flow information 1100 is information in which a series of processes for realizing the service provided by the application information 1000 is defined.

The logic processing unit 112 acquires the processing flow information 1100 included in the application information 1000 from the application management unit 111 in response to a request from the client application 210. Then, the logic processing unit 112 executes a series of processes (processing flow) for realizing the service provided by the application information 1000 based on the processing flow information 1100 acquired from the application management unit 111. Thereby, the service providing system 10 according to the present embodiment can provide various services (for example, "scan To mail delivery" service).

The job management unit 113 manages the job information stored in the job information storage unit 150. The job information is information including various information related to the job (for example, the creation date and status of the job). A job is a concept in which a series of processes (processing flows) for realizing various services is regarded as one execution unit.

The authentication service unit 120 authenticates by various authentication methods when the client application 210 makes various requests to the input / output service processing unit 110.

The document service unit 130 executes a predetermined process included in a series of processes (process flow) based on the process flow information 1100. Here, the document service unit 130 has an OCR processing unit 131 and a mail delivery unit 132.

The OCR processing unit 131 performs OCR processing on an electronic file (image file). The mail delivery unit 132 creates a mail with an electronic file attached and delivers the mail to a designated mail address.

The document service unit 130 may have, for example, a data conversion unit that converts the data format of the electronic file into predetermined data, a compression / decompression unit that compresses or decompresses the electronic file, and the like.

As described above, the document service unit 130 includes various functional units that execute predetermined processes included in the series of processes (process flow). Therefore, the document service unit 130 is realized by a group of programs (modules) that provide these various functions.

The application information storage unit 140 stores the application information 1000. The application information 1000 is stored in the application information storage unit 140 in association with the application ID that identifies the application information 1000. Therefore, the application ID is identification information that identifies the client application 210 and the application information 1000.

Here, the application information 1000 includes the processing flow information 1100. For example, the application information 1000 that provides the "scan To mail delivery" service includes the processing flow information 1100 that defines a series of processes that realize the service. That is, the application information 1000 that provides the "scan To mail delivery" service defines a processing flow information 1100 that defines a process of delivering an email to a specified email address after OCR processing an electronic file generated by scanning. Is included.

The application information 1000 may include two or more processing flow information 1100. For example, the application information 1000 that provides "scan To mail delivery" includes processing flow information 1100A that defines a process for delivering mail after OCR processing in English, and a process for delivering mail after OCR processing in Japanese. The processing flow information 1100B in which is defined may be included.

As described above, the processing flow information 1100 is information in which a series of processes (processing flows) for realizing the service provided by the application information 1000 are defined. The processing flow information 1100 is given a flow ID that identifies the processing flow information 1100. The details of the processing flow information 1100 will be described later.

The job information storage unit 150 stores job information. The reference information storage unit 160 stores reference information. Details of job information and reference information will be described later.

The input / output service processing unit 110, the authentication service unit 120, and the document service unit 130 may be realized by different information processing devices.

Here, the detailed functional configuration of the logic processing unit 112 will be described with reference to FIG. FIG. 5 is a functional configuration diagram of an example of the logic processing unit 112 according to the present embodiment.

The logic processing unit 112 shown in FIG. 5 includes a flow execution unit 301, a component management unit 302, a component group 303, a type conversion management unit 304, and a type conversion group 305. Further, the logic processing unit 112 has a type conversion information table 3000.

When the flow execution unit 301 receives the application execution request from the client application 210 via the authentication service unit 120, the flow execution unit 301 acquires the processing flow information 1100 included in the application information 1000 corresponding to the execution request from the application management unit 111. .. Then, the flow execution unit 301 executes a series of processing (processing flow) based on the processing flow information 1100 acquired from the application management unit 111.

Here, a series of processes based on the process flow information 1100 is executed by combining components for executing each process included in the series of processes. A component is realized by a program, a module, or the like for executing a process that realizes a predetermined function, and is defined by, for example, a class or a function.

The component management unit 302 manages the components. The component management unit 302 generates a component in response to a request from the flow execution unit 301, and returns the generated component to the flow execution unit 301. Note that the generation of a component means, for example, expanding a component defined by a class, a function, or the like on a memory (for example, RAM 14).

The component group 303 is a set of components. The component group 303 includes an OCR component 1310 and a mail delivery component 1320.

The OCR component 1310 is a component for OCR processing an electronic file. The OCR component 1310 performs OCR processing of an electronic file by requesting OCR processing from OCR processing unit 131 of the document service unit 130.

The mail delivery component 1320 is a component for delivering mail to a designated mail address. The mail delivery component 1320 delivers the mail to the designated mail address by requesting the mail delivery process 132 of the document service unit 130.

In this way, each component uses the document service unit 130 to execute a process for realizing a predetermined function. In addition to the above components, the component group 303 includes various components such as a conversion component for converting the data format of the electronic file into a predetermined data format and a compression component for compressing the electronic file. included.

Further, each component included in the component group 303 has a component common I / F 1300. The component common I / F 1300 is an API (Application Programming Interface) commonly defined for each component, and includes an API for generating a component and an API for executing processing of the component.

As described above, since each component has the component common I / F 1300, the influence of the addition of the component or the like can be localized. That is, for example, components can be added without affecting the flow execution unit 301, the component management unit 302, and the like. As a result, in the service providing system 10 according to the present embodiment, it is possible to reduce the development man-hours associated with the addition of a predetermined function (that is, the addition of a component for executing the process for realizing the function, etc.).

The type conversion management unit 304 manages the type conversion of the data type. Here, each component has a predetermined data type that it can handle. Therefore, the type conversion management unit 304 generates the type conversion included in the type conversion group 305 by referring to, for example, the type conversion information table 3000 shown in FIG. 6, in response to the request from the component.

Then, the type conversion management unit 304 requests the generated type conversion to execute the type conversion process. The type conversion is realized by a program or module that executes the type conversion process of the data type, and is defined by, for example, a class or a function. Further, the generation of the type conversion is to expand the type conversion defined by, for example, a class or a function into a memory (for example, on the RAM 14).

The data types include, for example, the data type "InputStream" indicating stream data, "LocalFilePath" indicating the path (address) of the electronic file stored in the storage device, and "File" indicating the substance of the electronic file. And so on.

Here, the type conversion information table 3000 will be described with reference to FIG. FIG. 6 is a diagram showing an example of a type conversion information table.

The type conversion information table 3000 shown in FIG. 6 has a data type before conversion, a data type after conversion, and a type conversion to be generated as data items. That is, the type conversion information stored in the type conversion information table 3000 is for converting the data type before conversion to the data type after conversion for each of the data type before conversion and the data type after conversion. Information associated with type conversion.

The type conversion group 305 is a set of type conversions. The type conversion group 305 includes a first type conversion 1410 for converting the data type "InputStream" to "LocalFilePath". In addition to this, the type conversion group 305 includes, for example, a second type conversion for converting the data type “LocalFilePath” to “File”.

Further, each type conversion included in the type conversion group 305 has a type conversion common I / F 1400. The type conversion common I / F1400 is an API commonly defined for each type conversion, and includes an API for generating a type conversion and an API for executing a type conversion process of the type conversion.

As described above, since each type conversion has a common type conversion I / F 1400, the influence of the addition of the type conversion and the like can be localized. That is, for example, it is possible to add type conversion without affecting the type conversion management unit 304 or the like. As a result, in the service providing system 10 according to the present embodiment, it is possible to reduce the development man-hours associated with the addition of type conversion and the like.

Here, the detailed functional configuration of the job management unit 113 will be described with reference to FIG. 7. FIG. 7 is a diagram showing a functional configuration of an example of the job management unit 113 according to the present embodiment.

The job management unit 113 shown in FIG. 7 has a job information management unit 401 and an access control unit 402.

Upon receiving the job information registration request from the logic processing unit 112, the job information management unit 401 creates job information and stores it in the job information storage unit 150. As a result, the job information is registered in the service providing system 10.

Further, when the job information management unit 401 receives a job information acquisition request from the access control unit 402, the job information management unit 401 acquires the job information from the job information storage unit 150. Then, the job information management unit 401 returns the acquired job information to the access control unit 402.

When the access control unit 402 receives the job information reference request from the client application 210 via the authentication service unit 120, the access control unit 402 sends the job information acquisition request to the job information management unit 401.

Further, when the job information is returned from the job information management unit 401, the access control unit 402 acquires the application ID (referenceable application ID described later) included in the reference information via the application management unit 111. Then, the access control unit 402 checks the access right for determining whether or not the client application 210 can refer to the job information returned from the job information management unit 401.

The reference information is associated with the application ID of the client application 210 or the application information 1000 and the application ID (referenceable application ID) of another application that can be referred to by the client application 210 or the application information 1000.

As a result, access control is performed when the client application 210 or the like refers to the job information of another application (another client application 210 or another application information 1000).

Here, the processing flow information 1100 included in the application information 1000 that provides the "scan To mail delivery" service will be described with reference to FIG. FIG. 8 is a diagram showing an example of the processing flow information 1100.

The processing flow information 1100 shown in FIG. 8 is information in which a series of processing (processing flow) for realizing the “scan To mail delivery” service is defined. That is, in the process flow information 1100 shown in FIG. 8, a flow ID 1101 and a process definition 1102 and a process definition 1103 indicating each process constituting a series of processes for realizing the “scan To mail delivery” service are defined. There is.

The flow ID 1101 is a flow ID that identifies the processing flow information 1100 shown in FIG.

The process definition 1102 and the process definition 1103 are defined in the form of "component name: process content? Optional parameter". Note that the optional parameters may be defined only when, for example, the component indicated by the component name and the processing content is necessary for performing the processing (that is, the definition of the optional parameters is arbitrary). When defining a plurality of option parameters, they are defined by combining the option parameters with "&".

In the process definition 1102, "ocr: ocr_process" is defined. This means that OCR processing is performed by the OCR component 1310. Note that no optional parameters are defined in the process definition 1102.

In the process definition 1103, "mail: send" is defined. This means that the mail delivery process is performed by the mail delivery component 1320.

Further, "? Mail_addless = null & filename = null" is defined in the process definition 1103. This means that the electronic file with the file name specified in "filename" is delivered by e-mail to the e-mail address specified in "mail_addless". In the example shown in FIG. 8, values are not specified for "mail_addless" and "filename" (that is, null).

As described above, the processing flow information 1100 defines the processing definition of each processing constituting the series of processing (processing flow). As a result, the service providing system 10 according to the present embodiment performs a series of processes for realizing the service provided by the application information 1000 by performing the processes by each component according to each process definition included in the process flow information 1100. Can be done.

The processes defined in each process definition included in the process flow information 1100 shown in FIG. 8 are executed in order from the top. That is, in the series of processes based on the process flow information 1100 shown in FIG. 8, the processes defined in the process definition 1102 and the processes defined in the process definition 1103 are executed in this order. However, the present invention is not limited to this, and the processing flow information 1100 may be defined with, for example, information indicating the execution order of the processing defined in each processing definition.

<Details of processing>
Next, the details of the processing of the information processing system 1 according to the present embodiment will be described. First, the overall process when the user of the device 20 uses the "scan To mail delivery" service will be described with reference to FIG. 9. FIG. 9 is a sequence diagram showing an example of overall processing of service use.

First, the client application 210 displays, for example, the service use screen 2100 shown in FIG. 10 (step S901). Such a service use screen 2100 is displayed, for example, by a user performing a display operation of the service use screen 2100.

The service use screen 2100 shown in FIG. 10 includes a file name input field 2101, an e-mail address input field 2102, and a scan execution button 2103.

The file name input field 2101 is an input area in which the user specifies the file name of the electronic file to be attached to the mail (that is, the electronic file obtained by OCR processing the electronic file generated by scanning). The e-mail address input field 2102 is an input area in which the user specifies an e-mail address to which the e-mail is delivered. The scan execution button 2103 is a button for executing scanning of a document and starting to use the service.

Here, on the service use screen 2100 shown in FIG. 10, the user specifies the file name and the e-mail address in the file name input field 2101 and the e-mail address input field 2102, and then presses the scan execution button 2103 to execute the scan. It is assumed that the operation has been performed.

Then, the client application 210 creates an image file (scanned image file) by scanning the original with the scanner 26 (step S902).

Here, when the authentication method between the client application 210 and the authentication service unit 120 is "application authentication", the client application 210 transmits a processing flow execution request including the client ID and the client secret to the authentication service unit 120 (step). S903).

The client ID is, for example, the application ID of the client application 210. The client secret is a password or the like for the client ID. That is, the execution request of the processing flow includes the client ID and the client secret as authentication information.

Further, the execution request of the processing flow includes the flow ID, the scanned image file, and the user-specified information. The user-designated information is a file name and an e-mail address designated in the file name input field 2101 and the e-mail address input field 2102, respectively.

For example, it is assumed that "test.pdf" is specified in the file name input field 2101 and "hoge@hogehoge.co.jp" is specified in the mail address input field 2102. In this case, the user-designated information is information including "mail_addless = hoge@hogehoge.co.jp" and "filename = test.pdf".

Next, when the authentication service unit 120 receives the execution request of the processing flow, the application authentication is performed based on the client ID and the client secret included in the execution request (step S904). That is, the authentication service unit 120 performs application authentication by determining whether or not the set of the client ID and the client secret included in the execution request matches the predetermined set of the client ID and the client secret. ..

Then, when the application authentication is successful, the authentication service unit 120 transmits a processing flow execution request to the logic processing unit 112 (step S905). The execution request of the processing flow includes a flow ID, a scanned image file, user-specified information, and an application ID.

If the application authentication fails in step S904, the authentication service unit 120 returns, for example, a notification indicating that the application authentication has failed to the client application 210.

When the authentication method with the authentication service unit 120 is "user authentication", the client application 210 transmits a processing flow execution request including a tenant ID, a user ID, and a password to the authentication service unit 120 ( Step S906).

The tenant ID is, for example, identification information that identifies an organization such as a group or a company to which the user of the device 20 on which the client application 210 is mounted belongs. Further, the user ID is, for example, identification information that identifies a user of the device 20 on which the client application 210 is mounted. That is, the execution request of the processing flow includes the tenant ID, the user ID, and the password as authentication information.

The tenant ID, user ID, and password may be input by the user on the service use screen 2100 shown in FIG. 10, for example. The execution request of the processing flow also includes the flow ID, the scanned image file, and the user-specified information, as described above.

Next, when the authentication service unit 120 receives the execution request of the processing flow, the authentication service unit 120 performs user authentication based on the tenant ID, the user ID, and the password included in the execution request (step S907). That is, the authentication service unit 120 determines whether or not the set of the tenant ID, the user ID, and the password included in the execution request matches the set of the predetermined tenant ID, the user ID, and the password. Then, user authentication is performed.

Then, when the user authentication is successful, the authentication service unit 120 transmits a processing flow execution request to the logic processing unit 112 (step S908). The execution request of the processing flow includes a flow ID, a scanned image file, user-specified information, and a user ID.

If the user authentication fails in step S907, the authentication service unit 120 returns, for example, a notification indicating that the user authentication has failed to the client application 210.

When the authentication method with the authentication service unit 120 is "access token authentication", the client application 210 transmits a processing flow execution request including the access token to the authentication service unit 120 (step S909).

The access token is, for example, a token used for authentication by OAuth. That is, the execution request of the processing flow includes the access token as the authentication information. The execution request of the processing flow also includes the flow ID, the scanned image file, and the user-specified information, as described above.

Next, when the authentication service unit 120 receives the execution request of the processing flow, the authentication service unit 120 performs access token authentication based on the access token included in the execution request (step S910). That is, the authentication service unit 120 performs access token authentication by determining whether or not the access token included in the execution request is valid.

Then, when the access token authentication is successful, the authentication service unit 120 transmits a processing flow execution request to the logic processing unit 112 (step S911). The execution request of the processing flow includes a flow ID, a scanned image file, user-specified information, and a user ID associated with the access token.

If the access token authentication fails in step S910, the authentication service unit 120 returns, for example, a notification indicating that the access token authentication has failed to the client application 210.

Finally, the logic processing unit 112 performs the execution processing of the processing flow (step S9126). That is, the logic processing unit 112 executes a series of processing based on the processing flow information 1100 of the flow ID included in the execution request.

Then, the logic processing unit 112 returns the processing result of the execution processing of the processing flow to the client application 210. As a result, the service providing system 10 according to the present embodiment can provide the "scan To mail delivery" service to the device 20.

Here, whether the authentication method between the client application 210 and the authentication service unit 120 is "app authentication", "user authentication", or "access token authentication" is determined in advance for each client application 210, for example. Has been done. Therefore, the client application 210 transmits, for example, an execution request of the processing flow including the designation of the authentication method to the authentication service unit 120. However, for example, on the service use screen 2100 shown in FIG. 10, the user may be able to select which authentication method to use.

As described above, in the information processing system 1 according to the present embodiment, before the service providing system 10 provides the service to the device 20, authentication is performed with the device 20 by various authentication methods. That is, in the information processing system 1 according to the present embodiment, the client application 210 mounted on the device 20 is authenticated before the client application 210 executes a series of processes. As a result, the service providing system 10 according to the present embodiment can provide the service only to a legitimate user (a client application 210 mounted on the device 20 or a user of the device 20).

Hereinafter, the details of the execution process of the process flow (the process of step S912 in FIG. 9) will be described with reference to FIG. FIG. 11 is a sequence diagram showing an example of execution processing of the processing flow according to the present embodiment.

When the flow execution unit 301 receives the execution request of the processing flow, the flow execution unit 301 transmits the job information registration request to the job information management unit 401 (step S1101). Here, when the authentication method between the client application 210 and the authentication service unit 120 is "application authentication", the job information registration request includes the application ID and the flow ID. On the other hand, when the authentication method between the client application 210 and the authentication service unit 120 is "user authentication" or "access token authentication", the job information registration request includes a user ID and a flow ID. ..

Upon receiving the job information registration request, the job information management unit 401 creates the job information and stores it in the job information storage unit 150 (step S1102). Then, the job information management unit 401 returns the registration result to the flow execution unit 301. As a result, the job information is registered in the service providing system 10. The registration result returned from the job information management unit 401 includes the job ID.

Here, the job information stored in the job information storage unit 150 will be described with reference to FIG. FIG. 12 is a diagram showing an example of job information.

As shown in FIG. 12, the job information has a job ID, an application name, a flow ID, a creation date, a state, an application ID, and a user ID.

The job ID is identification information that identifies the job. The application name is the name of the application (client application 210 or application information 1000) corresponding to the application ID. The flow ID is a flow ID included in the job information registration request. The creation date is the date when the job information was created.

The state is the state of the job. The states include, for example, "accepted" indicating that the job has not been executed yet, and "processing" indicating that the job is being executed. Further, the state includes, for example, "error" indicating that an error has occurred during job execution, "completed" indicating that job execution has been completed normally, and the like. The job information management unit 401 creates job information with the status set to "accepted".

The application ID is an application ID included in the job information registration request. If the application ID is not included in the job information registration request (that is, if the authentication method between the client application 210 and the authentication service unit 120 is "application authentication"), the application ID is not set.

The user ID is a user ID included in the job information registration request. When the user ID is not included in the job information registration request (that is, when the authentication method between the client application 210 and the authentication service unit 120 is "user authentication" or "access token authentication"), the user. The ID is not set.

In this way, the job information management unit 401 creates job information including a job ID, an application name, a flow ID, a creation date, a state, an application ID, a user ID, and the like. Then, the job information management unit 401 stores the created job information in the job information storage unit 150.

Next, the flow execution unit 301 transmits a process flow information acquisition request to the application management unit 111 (step S1103). The flow ID is included in the processing flow information acquisition request.

When the application management unit 111 receives the acquisition request for the processing flow information, the application management unit 111 acquires the processing flow information 1100 of the flow ID included in the acquisition request from the application information storage unit 140 (step S1104). Then, the application management unit 111 returns the processing flow information 1100 acquired from the application information storage unit 140 to the flow execution unit 301. Hereafter, the application management unit 111 will be described as having returned the processing flow information 1100 shown in FIG. 8 to the flow execution unit 301.

Next, the flow execution unit 301 transmits a component acquisition request to the component management unit 302 based on the processing flow information 1100 returned from the application management unit 111 (step S1105). That is, the flow execution unit 301 transmits to the component management unit 302 a component acquisition request including "ocr: ocr_process" defined in the process definition 1102 of the process flow information 1100 shown in FIG.

Upon receiving the component acquisition request, the component management unit 302 generates an OCR component 1310 corresponding to "ocr: ocr_process" included in the acquisition request (step S1106). The OCR component 1310 can be generated by using the component common I / F1300.

Then, the component management unit 302 returns the generated OCR component 1310 to the flow execution unit 301. That is, the component management unit 302 returns, for example, the address on the memory (for example, RAM 14) in which the OCR component 1310 is expanded to the flow execution unit 301.

When the OCR component 1310 is returned, the flow execution unit 301 transmits a processing execution request of the component to the OCR component 1310 (step S1107). The processing execution request of the component includes data and parameters.

Here, in step S1107, the data is an electronic file (scanned image file included in the execution request of the processing flow) received from the authentication service unit 120 as the data type “InputStream”. That is, the flow execution unit 301 transmits the scan image file included in the processing flow execution request to the OCR component 1310 simply as "data" (without being aware of the data type). Hereinafter, such an electronic file or the like that is not conscious of the data type will be simply referred to as “data”.

Further, since the option parameter is not defined in the process definition 1102, null is specified as the parameter in step S1107.

Upon receiving the processing execution request of the component, the OCR component 1310 transmits the type conversion request to the type conversion management unit 304 (step S1108). The type conversion request includes data and a designation of "LocalFilePath" indicating a data type that can be handled by the OCR component 1310.

Upon receiving the type conversion request, the type conversion management unit 304 checks whether or not the data type of the data included in the type conversion request matches the designated data type (step S1109).

Here, the data type of the data included in the type conversion request is "InputStream", while the designated data type is "LocalFilePath". Therefore, the type conversion management unit 304 determines that the data type of the data included in the type conversion request does not match the designated data type.

Then, the type conversion management unit 304 refers to the type conversion information table 3000 and specifies the type conversion for converting the data type "InputStream" to "LocalFilePath" (here, the first type conversion 1410 is specified). Will be.). Then, the type conversion management unit 304 generates the specified first type conversion 1410 (step S1110). The first type conversion 1410 can be generated by using the type conversion common I / F 1400.

Next, the type conversion management unit 304 transmits the execution request of the type conversion process to the first type conversion 1410 (step S1111). The execution request includes data.

Upon receiving the type conversion execution request, the first type conversion 1410 performs a type conversion process of converting the data type of the data included in the execution request from "InputStream" to "LocalFilePath" (step S1112). Then, the first type conversion 1410 returns the data whose data type has been converted to the type conversion management unit 304.

When the type conversion management unit 304 receives the data from the first type conversion 1410, the type conversion management unit 304 transmits the data to the OCR component 1310 (step S1113).

When the OCR component 1310 receives data from the type conversion management unit 304, the OCR component 1310 executes processing on the data (step S1114). That is, the OCR component 1310 performs OCR processing of the scanned image file indicated by the data (data type "LocalFilePath") by the OCR processing unit 131 of the document service unit 130.

Then, the OCR component 1310 returns the data indicating the processing result to the flow execution unit 301. The data returned here is data indicating a scanned image file that has been OCR-processed by the OCR component 1310 (data type "LocalFilePath").

Next, the flow execution unit 301 transmits a component acquisition request to the component management unit 302 based on the processing flow information 1100 (step S1115). That is, the flow execution unit 301 transmits to the component management unit 302 a component acquisition request including the “mail: send” defined in the process definition 1103 of the process flow information 1100 shown in FIG.

Upon receiving the component acquisition request, the component management unit 302 generates the mail delivery component 1320 corresponding to the "mail: send" included in the acquisition request (step S1116). The mail delivery component 1320 can be generated by using the component common I / F 1300.

Then, the component management unit 302 returns the generated mail delivery component 1320 to the flow execution unit 301. That is, the component management unit 302 returns, for example, the address on the memory (for example, RAM 14) in which the mail delivery component 1320 is expanded to the flow execution unit 301.

When the mail delivery component 1320 is returned, the flow execution unit 301 transmits a processing execution request of the component to the mail delivery component 1320 (step S1117). The processing execution request of the component includes data and parameters.

Here, in step S1117, the parameters include the option parameter "mail_addless = null & filename = null" of the process definition 1103 and the user-specified information.

Upon receiving the processing execution request of the component, the mail delivery component 1320 transmits the type conversion request to the type conversion management unit 304 (step S1118). The type conversion request includes data and a designation of "LocalFilePath" indicating a data type that can be handled by the mail delivery component 1320.

Upon receiving the type conversion request, the type conversion management unit 304 checks whether or not the data type of the data included in the type conversion request matches the designated data type (step S1119).

Here, the data type of the data included in the type conversion request is "LocalFilePath", and the designated data type is also "LocalFilePath". Therefore, the type conversion management unit 304 determines that the data type of the data included in the type conversion request matches the designated data type.

Then, the type conversion management unit 304 transmits the data included in the type conversion request to the mail delivery component 1320 (step S1120). In this way, when it is determined in the data type check (process of step S1118) that the data type of the data matches the specified data type, the type conversion management unit 304 generates the type conversion. Not performed.

When the mail delivery component 1320 receives data from the type conversion management unit 304, the mail delivery component 1320 executes processing on the data based on the parameters (step S1121). That is, the mail delivery component 1320 delivers the electronic file indicated by the data by the mail delivery unit 132 of the document service unit 130 based on the parameters.

More specifically, the mail delivery component 1320 first defines user-specified information in an optional parameter included in the parameter, and sets it as "mail_addless = hoge@hogehoge.co.jp & filename = test.pdf". Next, the mail delivery component 1320 attaches an electronic file in which the file name of the electronic file (that is, the scanned image file after OCR processing) indicated by the data is "test.pdf" by the mail delivery unit 132. To create. Finally, the mail delivery component 1320 delivers (sends) the created mail to "hoge@hogehoge.co.jp" by the mail delivery unit 132.

Then, the mail delivery component 1320 returns the data indicating the processing result to the flow execution unit 301. The data returned here is, for example, information indicating that the mail has been normally delivered by the mail delivery component 1320.

When the flow execution unit 201 receives data from the mail delivery component 1320, the flow execution unit 201 sends a job information update request to the job information management unit 401 (step S1122). The job information update request includes the job ID returned in step S1102 above.

Upon receiving the job information update request, the job information management unit 401 updates the job information of the job ID included in the update request among the job information stored in the job information storage unit 150 (step S1123). That is, the job information management unit 401 updates the state included in the job information of the job ID to "completed". As a result, it is managed that the job execution is completed normally.

As described above, the service providing system 10 according to the present embodiment executes a series of processes (process flow) by performing processes by each component based on the process flow information 1100. Thereby, the service providing system 10 according to the present embodiment can provide the service realized by the series of processes.

For example, when an error or the like occurs during the execution of a series of processes, the flow execution unit 301 sends a job information update request to the job information management unit 401 and updates the job information status to "error". do.

Hereinafter, a case where the client application 210 refers to the job information will be described. By referring to the job information, the client application 210 can, for example, analyze the cause of the error.

First, a process of registering an application (another client application or application information 1000) to which job information can be referred will be described with reference to FIG. 13. FIG. 13 is a sequence diagram showing an example of the registration process of the referenceable application.

First, the client application 210 sends a registration request for the referenceable application to the authentication service unit 120 (step S1301). Such a registration request can be transmitted, for example, by performing a registration operation of a referenceable application by a user.

In addition, the registration request of the referenceable application includes the application ID of the client application 210, the application ID (referenceable application ID) of the application capable of referring to the job information, the tenant ID, the user ID, and the password. Is included.

Upon receiving the registration request of the referenceable application, the authentication service unit 120 performs user authentication based on the tenant ID, user ID, and password included in the registration request (step S1302). That is, the authentication service unit 120 determines whether or not the set of the tenant ID, the user ID, and the password included in the registration request matches the set of the predetermined tenant ID, the user ID, and the password. Then, user authentication is performed.

Then, when the user authentication is successful, the authentication service unit 120 transmits a registration request for the referenceable application to the application management unit 111 (step S1303). The referenceable application registration request includes the application ID of the client application 210 and the referenceable application ID.

When the application management unit 111 receives the registration request of the referenceable application, the application management unit 111 creates reference information in which the application ID included in the registration request and the referenceable ID are associated with each other, and stores the reference information in the reference information storage unit 160 (step S1304). .. Then, the application management unit 111 returns the registration result to the client application 210. As a result, the reference information is registered in the service providing system 10.

Here, the reference information stored in the reference information storage unit 160 will be described with reference to FIG. FIG. 14 is a diagram showing an example of reference information.

As shown in FIG. 14, the reference information has an application ID and a referenceable application ID. The application ID is an application ID of an application (client application 210 or application information 1000) that refers to job information. The referenceable application ID is an application ID of another application (client application 210 or application information 1000) capable of referencing job information.

As described above, the reference information stored in the reference information storage unit 160 is associated with the application ID and the application ID of another application to which the application of the application ID can refer to the job information. As a result, as will be described later, access control can be performed when the client application 210 refers to the job information of another client application 210 or the application information 1000.

Next, processing when the client application 210, the application information 1000, and the like refer to the job information will be described. First, the process when the client application 210 whose authentication method with the authentication service unit 120 is "application authentication" refers to the job information will be described with reference to FIG. 15. FIG. 15 is a sequence diagram showing an example of job information reference processing.

First, the client application 210 sends a reference request for job information to the authentication service unit 120 (step S1501). Such a reference request can be made, for example, by the user inputting a job ID in the job ID input field 3101 and then pressing the reference button 3102 on the job information reference screen 3100 shown in FIG.

The job information reference request includes the job ID input in the job ID input field 3101 and the client secret.

When the authentication service unit 120 receives the reference request for job information, the authentication service unit 120 authenticates the application based on the client ID and the client secret included in the reference request (step S1502). That is, the authentication service unit 120 performs application authentication by determining whether or not the set of the client ID and the client secret included in the reference request matches the predetermined set of the client ID and the client secret. ..

Then, when the application authentication is successful, the authentication service unit 120 transmits a job information reference request to the access control unit 402 (step S1503). The job information reference request includes a job ID and an application ID.

If the application authentication fails in step S1502, the authentication service unit 120 returns, for example, a notification indicating that the application authentication has failed to the client application 210.

Upon receiving the job information reference request, the access control unit 402 transmits the job information acquisition request to the job information management unit 401 (step S1504). The job information acquisition request includes the job ID.

Upon receiving the job information acquisition request, the job information management unit 401 acquires the job information of the job ID included in the acquisition request from the job information storage unit 150 (step S1505). For example, when the job ID included in the job information acquisition request is "job 4", the job information management unit 401 acquires the job information of the job ID "job 4" from the job information storage unit 150. When a plurality of job IDs are included in the job information acquisition request, the job information management unit 401 acquires the plurality of job information from the job information storage unit 150.

Then, the job information management unit 401 returns the acquired job information to the access control unit 402.

Next, the access control unit 402 checks the access right (step S1506). That is, the access control unit 402 determines whether or not the application ID included in the job information reference request matches the application ID included in the job information acquired in step S1502.

Then, when the access control unit 402 determines that the application ID included in the job information reference request matches the application ID included in the job information acquired in step S1502 above, the access control unit 402 transfers the job information to the client application 210. Send back.

On the other hand, when the access control unit 402 determines that these application IDs do not match, the access control unit 402 transmits a referenceable application ID acquisition request to the application management unit 111 (step S1508). The request for acquiring the referenceable application ID includes the application ID included in the request for referencing the job information.

If a plurality of job information is acquired in step S1502, the job information for which it is determined in step S1506 that the application IDs do not match among these job information can be processed after step S1508. good.

Next, when the application management unit 111 receives the acquisition request of the referenceable application ID, the application management unit 111 acquires the reference information of the application ID included in the acquisition request (step S1508). Then, the application management unit 111 returns the referenceable application ID included in the acquired reference information to the access control unit 402.

Next, the access control unit 402 checks the access right (step S1509). That is, the access control unit 402 determines whether or not the application ID including the job information acquired in step S1502 and the referenceable application ID of at least one of the referenceable application IDs match.

Then, when the access control unit 402 determines that the application ID and at least one referenceable application ID among the referenceable application IDs match, the access control unit 402 returns the job information to the client application 210.

On the other hand, when it is determined that the application ID and all the referable application IDs do not match, the access control unit 402 returns a notification indicating that the reference of the job information is not permitted to the client application 210. Therefore, in this case, the client application 210 cannot refer to the job information.

When the job information is returned from the access control unit 402, the client application 210 displays the job information in the job information field 3103 of the job information reference screen 3100 shown in FIG. 16 (step S1510). As a result, the client application 210 can display the job information including the application ID of the client application 210 and the job information including the referenceable application ID. Therefore, the user of the device 20 can, for example, analyze the cause of the error of the job in which the error has occurred by referring to the job information displayed by the client application 210.

As described above, in the information processing system 1 according to the present embodiment, when the client application 210 mounted on the device 20 refers to the job information, it is determined whether or not the client application 210 has the authority to refer to the job information. As a result, in the information processing system 1 according to the present embodiment, the service providing system 10 can display only the job information having the reference authority on the client application 210.

Next, the process when the client application 210 whose authentication method with the authentication service unit 120 is "user authentication" refers to the job information will be described with reference to FIG. FIG. 17 is a sequence diagram showing another example (No. 1) of the job information reference process.

First, the client application 210 sends a reference request for job information to the authentication service unit 120 (step S1701). The job information reference request includes a job ID, a tenant ID, a user ID, and a password. The tenant ID, user ID, and password may be input by the user, for example, on the job information reference screen 3100 shown in FIG.

Upon receiving the job information reference request, the authentication service unit 120 performs user authentication based on the tenant ID, user ID, and password included in the reference request (step S1702). That is, the authentication service unit 120 determines whether or not the set of the tenant ID, the user ID, and the password included in the reference request matches the set of the predetermined tenant ID, the user ID, and the password. Then, user authentication is performed.

Then, when the user authentication is successful, the authentication service unit 120 transmits a job information reference request to the access control unit 402 (step S1703). The job information reference request includes a job ID and a user ID.

If the user authentication fails in step S1702, the authentication service unit 120 returns, for example, a notification indicating that the user authentication has failed to the client application 210.

Upon receiving the job information reference request, the access control unit 402 transmits the job information acquisition request to the job information management unit 401 (step S1704). The job information acquisition request includes the job ID.

Upon receiving the job information acquisition request, the job information management unit 401 acquires the job information of the job ID included in the acquisition request from the job information storage unit 150 (step S1705). Then, the job information management unit 401 returns the acquired job information to the access control unit 402.

Next, the access control unit 402 checks the access right (step S1706). That is, the access control unit 402 determines whether or not the user ID included in the job information reference request matches the user ID included in the job information acquired in step S1702.

Then, when the access control unit 402 determines that the user ID included in the job information reference request matches the user ID included in the job information acquired in step S1702 above, the access control unit 402 transfers the job information to the client application 210. Send back.

On the other hand, when it is determined that these user IDs do not match, the access control unit 402 returns a notification indicating that the reference to the job information is not permitted to the client application 210. Therefore, in this case, the client application 210 cannot refer to the job information.

When the job information is returned from the access control unit 402, the client application 210 displays the job information (step S1707). As a result, the client application 210 can display job information including the user ID of the user of the device 20.

Note that FIG. 17 has described the case where the authentication method between the client application 210 and the authentication service unit 120 is “user authentication”, but from step S1703 onward, the case where the authentication method is “access token authentication”. Can be applied in the same way. In this case, the reference request for the job information in step S1701 is different from FIG. 17 in that the job ID and the access token are included, and the access token authentication is performed in step S1702.

Here, as shown in FIG. 12, the job information stored in the job information storage unit 150 includes a user ID, but instead of the user ID (or in addition to the user ID), the tenant ID May be included. That is, for example, as shown in FIG. 18, the job information stored in the job information storage unit 150 may include a tenant ID instead of the user ID.

In this case, the process when the client application 210 whose authentication method with the authentication service unit 120 is "user authentication" refers to the job information will be described with reference to FIG. FIG. 19 is a sequence diagram showing another example (No. 2) of the job information reference process.

First, the client application 210 sends a reference request for job information to the authentication service unit 120 (step S1901). The job information reference request includes a job ID, a tenant ID, a user ID, and a password. The tenant ID, user ID, and password may be input by the user, for example, on the job information reference screen 3100 shown in FIG.

Upon receiving the job information reference request, the authentication service unit 120 performs user authentication based on the tenant ID, user ID, and password included in the reference request (step S1902). That is, the authentication service unit 120 determines whether or not the set of the tenant ID, the user ID, and the password included in the reference request matches the set of the predetermined tenant ID, the user ID, and the password. Then, user authentication is performed.

Then, when the user authentication is successful, the authentication service unit 120 transmits a job information reference request to the access control unit 402 (step S1903). The job information reference request includes a job ID and a tenant ID.

If the user authentication fails in step S1702, the authentication service unit 120 returns, for example, a notification indicating that the user authentication has failed to the client application 210.

Upon receiving the job information reference request, the access control unit 402 transmits the job information acquisition request to the job information management unit 401 (step S1904). The job information acquisition request includes the job ID.

Upon receiving the job information acquisition request, the job information management unit 401 acquires the job information of the job ID included in the acquisition request from the job information storage unit 150 (step S1905). Then, the job information management unit 401 returns the acquired job information to the access control unit 402.

Next, the access control unit 402 checks the access right (step S1906). That is, the access control unit 402 determines whether or not the tenant ID included in the job information reference request matches the tenant ID included in the job information acquired in step S1902.

Then, when the access control unit 402 determines that the tenant ID included in the job information reference request matches the tenant ID included in the job information acquired in step S1902 above, the access control unit 402 transfers the job information to the client application 210. Send back.

On the other hand, when it is determined that these tenant IDs do not match, the access control unit 402 returns a notification indicating that the reference of the job information is not permitted to the client application 210. Therefore, in this case, the client application 210 cannot refer to the job information.

When the job information is returned from the access control unit 402, the client application 210 displays the job information (step S1907). As a result, the client application 210 can display job information including the tenant ID of the user of the device 20.

<Summary>
As described above, the information processing system 1 according to the present embodiment authenticates the client application 210 when the client application 210 executes a series of processes for realizing the service. Moreover, in the information processing system 1 according to the present embodiment, authentication can be performed by various authentication methods according to the client application 210.

Therefore, in the information processing system 1 according to the present embodiment, only legitimate users (users of the client application 210 and the device 20) can use the service provided by the service providing system 10.

Further, in the information processing system 1 according to the present embodiment, the client application 210 or the like can refer to the job information of a series of processes executed by another application (another client application 210, an application information 1000, etc.). .. Moreover, in the information processing system 1 according to the present embodiment, access control is performed by determining whether or not the client application 210 or the like has the authority to refer to the job information. As a result, in the information processing system 1 according to the present embodiment, only a legitimate user (client application 210, application information 1000, etc.) can be allowed to refer to the job information.

The present invention is not limited to the above-described embodiment disclosed specifically, and various modifications and modifications can be made without departing from the scope of claims.

1 Information processing system 10 Service provision system 20 Equipment 110 Input / output service processing unit 111 App management department 112 Logic processing department 113 Job management department 120 Authentication service department 130 Document service department 140 Application information storage unit 150 Job information storage unit 160 Reference information storage Part 210 Client application 301 Flow execution part 302 Component management part 303 Component group 304 type conversion management part 305 type conversion group 401 Job information management part 402 Access control part

Japanese Patent No. 4039191

Claims (9)

An information processing system including one or more information processing devices and having a plurality of programs that execute predetermined processes.
For each series of processes using electronic data, the flow information in which the execution order of one or more programs that execute each process of the series of processes is defined is stored in association with the flow identification information that identifies the flow information. Memories to do and
A first device including information on electronic data, flow identification information, and authentication information for authenticating the one device from one of the one or more devices connected to the information processing system. The first receiving means to receive the request and
An authentication means for performing authentication based on the authentication information included in the first request received by the first receiving means.
When the authentication by the authentication means is successful, the flow information stored in the storage means is associated with the flow identification information included in the first request received by the first receiving means. An acquisition means for acquiring the flow information stored in the storage means, and
By executing each of the programs according to the execution order defined in the flow information acquired by the acquisition means, the electronic data included in the first request received by the first receiving means is related to the electronic data. An execution means for executing the series of processes using information-based electronic data, and
Have a,
A job information storage means for storing job information including a job identification information of a job indicating the series of processes and an execution state of the job.
A second receiving means for receiving a second request including the job identification information and the authentication information from one of the one or more devices connected to the information processing system.
A job information acquisition means for acquiring the job information of the job identification information included in the second request received by the second receiving means, and a job information acquisition means.
Further, it has a transmission means for transmitting the job information acquired by the job information acquisition means to the one device that is the request source of the second request.
The authentication means is
The authentication is performed based on the authentication information included in the second request received by the second receiving means.
The job information acquisition means is
If the authentication based on the authentication information included in the second request by the authentication means is successful, the job information of the job identification information included in the second request received by the second receiving means. To get an information processing system. The authentication information is
The application identification information that is mounted on the one device and identifies the application program that transmits the first request, and the first password for the application identification information are included.
The authentication means is
The information processing system according to claim 1, wherein the application is authenticated by the application authentication based on the application identification information included in the authentication information and the first password. The authentication information is
The user identification information that identifies the user who uses the one device and the second password for the user identification information are included.
The authentication means is
The information processing system according to claim 1, wherein authentication is performed by user authentication based on the user identification information included in the authentication information and the second password. The authentication information further
Contains group identification information that identifies the group to which the user belongs
The authentication means is
The information processing system according to claim 3, wherein the authentication is performed by user authentication based on the user identification information included in the authentication information, the group identification information, and the second password. The authentication information is
Includes OAuth access tokens
The authentication means is
The information processing system according to claim 1, wherein the authentication is performed by access token authentication based on the access token included in the authentication information. The job information further includes a first application identification information that identifies an application program that has executed the series of processes among the application programs mounted on one or more devices connected to the information processing system. Included,
The second receiving means is
A second application identification information that identifies the job identification information, the authentication information, and the application program mounted on the one device from one of the one or more devices connected to the information processing system. Received a second request, including
The transmission means is
When the first application identification information included in the job information acquired by the job information acquisition means and the second application identification information included in the second request match, the job information is converted into the job information. The information processing system according to any one of claims 1 to 5, which is transmitted to the one device that is the request source of the second request. A reference that stores reference information including application identification information that identifies an application program mounted on the device and referenceable application identification information that identifies another application program to which the application program can refer to the job information. Has information storage means,
The transmission means is
When the first application identification information included in the job information acquired by the job information acquisition means and the second application identification information included in the second request match, or the first. When the app identification information of the above and the referable app identification information included in the reference information corresponding to the second application identification information match, the job information is obtained from the one of the requesting sources of the second request. The information processing system according to claim 6 , which is transmitted to the device of the above. An information processing device having a plurality of programs that execute predetermined processes.
For each series of processes using electronic data, the flow information in which the execution order of one or more programs that execute each process of the series of processes is defined is stored in association with the flow identification information that identifies the flow information. Memories to do and
A first device including information on electronic data, flow identification information, and authentication information for authenticating the one device from one of the one or more devices connected to the information processing device. The first receiving means to receive the request and
An authentication means for performing authentication based on the authentication information included in the first request received by the first receiving means.
When the authentication by the authentication means is successful, the flow information stored in the storage means is associated with the flow identification information included in the first request received by the first receiving means. An acquisition means for acquiring the flow information stored in the storage means, and
By executing each of the programs according to the execution order defined in the flow information acquired by the acquisition means, the electronic data included in the first request received by the first receiving means is related to the electronic data. An execution means for executing the series of processes using information-based electronic data, and
Have a,
A job information storage means for storing job information including a job identification information of a job indicating the series of processes and an execution state of the job.
A second receiving means for receiving a second request including the job identification information and the authentication information from one of the one or more devices connected to the information processing device.
A job information acquisition means for acquiring the job information of the job identification information included in the second request received by the second receiving means, and a job information acquisition means.
Further, it has a transmission means for transmitting the job information acquired by the job information acquisition means to the one device that is the request source of the second request.
The authentication means is
The authentication is performed based on the authentication information included in the second request received by the second receiving means.
The job information acquisition means is
If the authentication based on the authentication information included in the second request by the authentication means is successful, the job information of the job identification information included in the second request received by the second receiving means. To get the information processing device. It is an information processing method executed by an information processing system including one or more information processing devices and having a plurality of programs for executing predetermined processes, and for each series of processes using electronic data, the series of processes is performed. An information processing system having a storage means that stores flow information in which the execution order of one or more programs that execute each process is defined in association with the flow identification information that identifies the flow information.
A first device including information on electronic data, flow identification information, and authentication information for authenticating the one device from one of the one or more devices connected to the information processing system. The first receiving procedure to receive the request and
An authentication procedure for performing authentication based on the authentication information included in the first request received by the first reception procedure, and an authentication procedure.
When the authentication by the authentication procedure is successful, the flow information stored in the storage means is associated with the flow identification information included in the first request received by the first reception procedure. The acquisition procedure for acquiring the flow information stored in the storage means, and
By executing each of the programs according to the execution order defined in the flow information acquired by the acquisition procedure, the electronic data included in the first request received by the first reception procedure is related to the electronic data. An execution procedure for executing the series of processes using information-based electronic data, and
The execution,
The information processing system further includes job information storage means for storing job information including job identification information of a job indicating the series of processes and the execution state of the job.
A second receiving procedure for receiving a second request including the job identification information and the authentication information from one of the one or more devices connected to the information processing system.
A job information acquisition procedure for acquiring the job information of the job identification information included in the second request received by the second reception procedure, and a job information acquisition procedure.
Further executing the transmission procedure of transmitting the job information acquired by the job information acquisition procedure to the one device of the request source of the second request.
The authentication procedure is
The authentication is performed based on the authentication information included in the second request received by the second reception procedure.
The job information acquisition procedure is as follows.
If the authentication based on the authentication information included in the second request by the authentication procedure is successful, the job information of the job identification information included in the second request received by the second reception procedure. How to get information processing.

Images